sorry. I need raw dumps. So something like
root# tcpdump -w /tmp/dump.pcap -s 4096 -i eth0 port 139 or port 445
for a successful run on the FC1 box and also a failed run from
smbclient on the Solaris box.